This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json) Hash identifier: pZZQZOYjzIxXyvLhYnj9abREF9gMMcGuIWyM9D2kSEs= Subject key identifier: 4C:77:15:B6:93:F6:29:7A:11:6E:F2:33:7E:98:C8:DA:CF:A7:89:91 Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019BD08CC3F044C32A23AF4CBF409EC471BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft Manifest number: 17D4 Signing time: Sun 18 Jan 2026 10:00:44 +0000 Manifest this update: Sun 18 Jan 2026 10:00:44 +0000 Manifest next update: Mon 19 Jan 2026 10:00:44 +0000 Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=) 2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=) 3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=) 4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: msIbCZxIov4Kp9LKh5D093Vm0NtfDtwkYpUdm4TNSls=) 5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:8c:c3:f0:44:c3:2a:23:af:4c:bf:40:9e:c4:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Jan 18 10:00:44 2026 GMT Not After : Jan 19 10:00:44 2026 GMT Subject: CN=4c7715b693f6297a116ef2337e98c8dacfa78991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:7c:ff:1e:cd:47:b9:68:67:e9:12:b0:e6: 7f:13:58:33:f3:23:60:fb:b5:07:df:37:5b:c4:2e: 96:00:bc:3b:1c:72:5c:b1:7f:61:14:90:23:2d:47: 09:b1:24:af:c4:9b:29:dd:76:95:76:af:74:ae:0f: 6f:32:6d:28:cc:f7:fb:a7:2f:50:b2:57:4d:ce:f4: 40:1e:af:ee:cf:3e:f0:9d:1e:85:3b:8f:b5:ee:b3: de:08:40:53:5e:6a:23:e7:62:48:16:0e:9c:87:8f: 73:7e:cd:72:5a:2b:82:2d:42:38:40:4d:c8:5b:b4: e1:26:c9:48:91:0c:c1:9c:bb:06:d0:d9:c9:91:30: 18:0d:fc:10:1a:5e:56:53:d7:a8:ae:0a:3d:e5:2b: 79:df:1d:da:56:74:44:4c:35:46:85:f3:36:4a:87: 47:00:8b:72:47:16:31:09:e6:08:bd:28:8d:93:65: d8:61:7e:94:dd:2d:5a:ed:8d:1a:eb:24:b6:ab:6b: 7c:6e:e6:d3:43:77:01:d3:e1:72:ad:54:18:47:76: 1a:7f:d3:ff:e3:b4:66:6b:47:12:3e:78:e4:e0:82: 06:65:5a:e7:0d:09:c2:12:80:a0:0f:1b:7f:d5:e7: 6f:82:35:5c:3e:4b:e1:50:c6:ee:87:fd:b8:5c:4d: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:77:15:B6:93:F6:29:7A:11:6E:F2:33:7E:98:C8:DA:CF:A7:89:91 X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:92:87:6f:1f:ba:2c:6b:d2:1c:d0:2b:c2:87:71:ee:21: 66:73:38:bd:a9:1b:41:19:01:f4:ec:6e:25:00:0e:a1:a5:25: 2c:e3:17:63:c4:df:c3:6a:8e:cc:c6:93:34:7c:59:d2:ac:6e: 55:81:20:32:91:3c:e7:f9:33:26:9f:81:dc:a4:e8:1c:82:d1: e6:db:f2:2e:f4:e0:98:aa:a6:2d:02:da:c4:46:9c:2d:37:5f: 56:9b:07:88:c0:53:ed:bc:e8:19:49:30:3d:1f:57:30:7e:ae: 41:92:32:45:5f:e8:d4:0d:7e:e3:6d:d1:18:3b:4d:b4:51:15: a9:97:de:8d:57:e9:92:3e:f3:5f:25:be:b9:e3:a9:76:97:44: 04:2d:2b:af:06:a2:3a:69:c4:3d:46:e5:af:92:33:c3:4f:43: d0:02:d7:a9:b4:8d:2c:1e:57:e2:68:bb:6b:93:72:f5:89:02: 8f:c1:01:b7:ec:68:1a:f1:f6:ba:51:62:84:d5:22:30:5f:66: 81:81:02:68:59:6e:ce:d5:71:36:b1:26:80:45:34:88:c1:90: 54:c1:5c:80:7d:06:ef:1a:27:91:10:7a:c9:5a:93:c6:52:c3: 17:76:e5:1d:35:78:5a:57:38:61:60:ad:09:ff:06:2c:3f:0d: f5:0e:1a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQjMPwRMMqI69Mv0CexHG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjYwMTE4MTAwMDQ0WhcNMjYwMTE5MTAwMDQ0WjAzMTEwLwYDVQQD Eyg0Yzc3MTViNjkzZjYyOTdhMTE2ZWYyMzM3ZTk4YzhkYWNmYTc4OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXp8/x7NR7loZ+kSsOZ/E1gz8yNg +7UH3zdbxC6WALw7HHJcsX9hFJAjLUcJsSSvxJsp3XaVdq90rg9vMm0ozPf7py9Q sldNzvRAHq/uzz7wnR6FO4+17rPeCEBTXmoj52JIFg6ch49zfs1yWiuCLUI4QE3I W7ThJslIkQzBnLsG0NnJkTAYDfwQGl5WU9eorgo95St53x3aVnRETDVGhfM2SodH AItyRxYxCeYIvSiNk2XYYX6U3S1a7Y0a6yS2q2t8bubTQ3cB0+FyrVQYR3Yaf9P/ 47Rma0cSPnjk4IIGZVrnDQnCEoCgDxt/1edvgjVcPkvhUMbuh/24XE1p8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx3FbaT9il6EW7yM36YyNrPp4mRMB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF2Sh28f uixr0hzQK8KHce4hZnM4vakbQRkB9OxuJQAOoaUlLOMXY8Tfw2qOzMaTNHxZ0qxu VYEgMpE85/kzJp+B3KToHILR5tvyLvTgmKqmLQLaxEacLTdfVpsHiMBT7bzoGUkw PR9XMH6uQZIyRV/o1A1+423RGDtNtFEVqZfejVfpkj7zXyW+ueOpdpdEBC0rrwai OmnEPUblr5Izw09D0ALXqbSNLB5X4mi7a5Ny9YkCj8EBt+xoGvH2ulFihNUiMF9m gYECaFluztVxNrEmgEU0iMGQVMFcgH0G7xonkRB6yVqTxlLDF3blHTV4Wlc4YWCt Cf8GLD8N9Q4aBQ== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:35 2026 by rpki-client